Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
23 results
copy-as-yara preview

copy-as-yara

GitHubald3ns/copy-as-yara

This is a little plugin to copy disassembly in a way that is usable in YARA rules!

binary-analysismalware-analysisreverse-engineering+1
48
1 year ago
maldrolyzer preview

maldrolyzer

GitHubmaldroid/maldrolyzer

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

android-securitycommand-and-controlinformation-gathering+3
11211 years ago
tinyxml preview

tinyxml

GitHubvm2mv/tinyxml

TinyXML 2.6.2 with fixes for CVE-2021-42260 and CVE-2023-34194

code-analysisgeneral-purpose-utilitiesstatic-analysis+1
11 year ago
jsonorg-tp1 preview

jsonorg-tp1

GitHubscabench/jsonorg-tp1

simple application with a CVE-2022-45688 vulnerability

code-analysiseducationstatic-analysis+2
2 years ago
jsonorg-fp2 preview

jsonorg-fp2

GitHubscabench/jsonorg-fp2

simple application with a (unreachable!) CVE-2022-45688 vulnerability

code-analysiseducationmisconfiguration+3
2 years ago
jsonorg-fp3 preview

jsonorg-fp3

GitHubscabench/jsonorg-fp3

simple application with a (unreachable!) CVE-2022-45688 vulnerability

code-analysiseducationpapers-research+3
2 years ago
jsonorg-fp1 preview

jsonorg-fp1

GitHubscabench/jsonorg-fp1

simple application with a (unreachable!) CVE-2022-45688 vulnerability

educationpapers-researchstatic-analysis+2
2 years ago
jsonorg-fn1 preview

jsonorg-fn1

GitHubscabench/jsonorg-fn1

simple application with a CVE-2022-45688 vulnerability

code-analysiseducationmisconfiguration+3
12 years ago
CVE-2017-13208-Scanner preview

CVE-2017-13208-Scanner

GitHubidanshechter/cve-2017-13208-scanner

Python script using r2pipe to detect CVE-2017-13208 in Android libnetutils.so by checking for missing dhcp_size validation via static binary analysis.

android-securitybinary-analysisexploitation+3
15 years ago
log4j-scanner-CVE-2021-44228 preview

log4j-scanner-CVE-2021-44228

GitHubgeorge-petrakis/log4j-scanner-cve-2021-44228

Simple tool for scanning entire directories for attempts of CVE-2021-44228

code-analysismisconfigurationstatic-analysis+3
24 years ago
React2Shell-Vulnerability-Verification-Script preview

React2Shell-Vulnerability-Verification-Script

GitHubdegenwithheart/react2shell-vulnerability-verification-script

Standalone Python script to verify if a project is affected by CVE-2025-55182 (React2Shell). Checks package.json dependencies and performs optional…

code-analysiseducationstatic-analysis+3
9 months ago
CVE-2007-4559 preview

CVE-2007-4559

GitHubdavidholiday/cve-2007-4559

Educational demonstration of CVE-2007-4559 Python tarfile symlink attack with a script showing why os.path.realpath() fails to prevent extraction…

code-analysiseducationexploitation+3
3 years ago
bom-view preview

bom-view

GitHubhristiy4n/bom-view

Static web application for viewing SBOMs and performing on-demand vulnerability scanning with osv.dev. Easily deployable to GitHub/GitLab Pages.

devsecopsstatic-analysissupply-chain-security+3
321 days ago
CVE-2020-14195 preview

CVE-2020-14195

GitHubal1ex/cve-2020-14195

This is a simple test for FasterXML jackson-databind

code-analysisexploitationstatic-analysis+2
13 months ago
jsecret preview

jsecret

GitHubraoufmaklouf/jsecret

Fast Go-based static scanner for detecting sensitive data (API keys, tokens, passwords) in JavaScript files and source code using regex patterns.

code-analysisinformation-gatheringsecret-detection+2
432 years ago
SSMA preview

SSMA

GitHubsecrary/ssma

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]

forensicsmalware-analysisstatic-analysis+1
4146 years ago
peach preview

peach

GitHubcalebstewart/peach

Simple vulnerability scanning framework

code-analysisfuzzingstatic-analysis+1
519 years ago
DDEtect preview

DDEtect

GitHubaserper/ddetect

Simple DDE object detector

malware-analysisstatic-analysisvulnerability-analysis
568 years ago
Previous12Next